Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          2lCkZzTJtPJQDUQYhsi70G2fBbl4g8gF3NptnPKE5KM=
Subject key identifier:   0A:CC:90:D8:94:4D:14:A8:AC:68:4A:FD:11:F3:36:69:91:01:AD:89
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       01962F3D38E0F572FBAAC5D5AACE8B5D0D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          0230
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: kE5UFmO3pb5DDParpzeCjJv7YED/6NKekSO2M4R1wEw=)
                          2: lbYGE0sLJ3B23IRi-OtNtyGPAp0.roa (hash: DQpQYf+5h9YK3aPo5AxywjFuQIhJ9ib5nUDkQNDeYcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:e0:f5:72:fb:aa:c5:d5:aa:ce:8b:5d:0d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=0acc90d8944d14a8ac684afd11f336699101ad89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:ce:66:21:79:8e:be:6a:0f:c7:e8:c5:30:
                    24:ac:87:da:73:b1:22:46:cc:e3:33:1f:0f:97:7b:
                    9e:0c:53:db:91:28:7a:04:d3:e8:30:3c:1d:36:2e:
                    62:40:93:1e:8f:d8:0a:36:e0:2d:61:6b:fb:0d:ca:
                    d8:ad:13:9b:95:2d:6f:23:6a:1e:01:ec:b3:92:0c:
                    01:f0:38:36:c2:94:95:f5:5f:55:c8:ce:96:d7:86:
                    67:c6:54:dc:af:4d:15:b6:6a:2a:9e:99:d1:df:59:
                    c1:f5:ad:00:b9:3c:26:c7:77:a4:0f:72:1e:80:2e:
                    3e:b3:9c:bd:87:61:97:e9:a7:6c:54:60:ef:e3:24:
                    b6:59:f5:f8:65:0e:47:53:76:e0:a1:26:3f:b2:a4:
                    37:ee:59:9a:66:cb:b6:30:fa:16:ce:5a:7c:1e:48:
                    e6:ae:52:d2:83:c9:b0:b6:b8:65:12:a0:5b:1d:38:
                    ef:e9:ac:38:9b:42:ff:4b:c1:aa:35:dd:cc:af:18:
                    a2:48:e7:1e:9e:fd:76:91:f4:df:9d:cb:ec:44:34:
                    bd:4f:a3:6b:fb:78:43:f2:66:fa:64:9a:5d:b9:46:
                    38:c4:00:e9:a5:f2:ac:cb:c3:9b:9b:42:9c:df:8a:
                    f5:6d:0e:be:67:d4:43:9c:aa:6d:59:6f:c8:bb:f7:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CC:90:D8:94:4D:14:A8:AC:68:4A:FD:11:F3:36:69:91:01:AD:89
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:d7:70:45:cd:d1:71:8a:48:23:60:67:4d:cc:96:32:87:
         e9:96:5e:aa:37:39:90:17:e0:00:8b:ba:24:1e:df:83:b4:90:
         e6:6c:08:19:53:b3:d3:74:7c:3c:8f:7c:45:56:3a:4f:24:3c:
         b2:d1:49:94:79:2c:1a:5a:46:98:8e:27:ea:f3:68:aa:17:a4:
         fc:2b:1e:52:d4:7f:11:b8:b2:d9:70:b7:45:34:3a:11:01:73:
         de:47:3e:59:75:64:e8:15:62:75:1f:8e:01:78:46:ac:54:07:
         1b:9a:fe:d4:13:da:c9:03:c6:96:58:66:8d:a8:57:61:f9:29:
         7a:dc:52:c2:dc:41:cf:d6:01:a1:d5:42:36:86:79:b1:07:fa:
         94:8d:c4:ee:06:58:bf:b8:53:19:d0:5f:26:d3:86:37:b8:f0:
         15:00:18:2e:26:c1:a3:34:15:47:60:e4:71:0e:6f:48:69:df:
         35:dd:2f:85:c5:ee:5c:81:db:d8:0d:f4:61:64:4c:9b:6e:20:
         f9:97:0c:fc:c6:7d:61:fa:f2:0d:2a:9f:5e:11:eb:69:bc:2b:
         d1:79:21:2a:95:32:55:fb:6e:ca:8b:11:09:82:71:7b:e4:3f:
         4f:6a:4e:27:e3:7f:d4:8e:13:55:d4:d3:41:c9:ba:bf:a6:fa:
         2f:a1:8f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTjg9XL7qsXVqs6LXQ1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1
MzkzMjYwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
EygwYWNjOTBkODk0NGQxNGE4YWM2ODRhZmQxMWYzMzY2OTkxMDFhZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1bOZiF5jr5qD8foxTAkrIfac7Ei
RszjMx8Pl3ueDFPbkSh6BNPoMDwdNi5iQJMej9gKNuAtYWv7DcrYrROblS1vI2oe
AeyzkgwB8Dg2wpSV9V9VyM6W14ZnxlTcr00VtmoqnpnR31nB9a0AuTwmx3ekD3Ie
gC4+s5y9h2GX6adsVGDv4yS2WfX4ZQ5HU3bgoSY/sqQ37lmaZsu2MPoWzlp8Hkjm
rlLSg8mwtrhlEqBbHTjv6aw4m0L/S8GqNd3MrxiiSOcenv12kfTfncvsRDS9T6Nr
+3hD8mb6ZJpduUY4xADppfKsy8Obm0Kc34r1bQ6+Z9RDnKptWW/Iu/dfkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArMkNiUTRSorGhK/RHzNmmRAa2JMB8GA1UdIwQY
MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt
YTMwZDgyYmQ2MjE5LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5
LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlXXcEXN
0XGKSCNgZ03MljKH6ZZeqjc5kBfgAIu6JB7fg7SQ5mwIGVOz03R8PI98RVY6TyQ8
stFJlHksGlpGmI4n6vNoqhek/CseUtR/Ebiy2XC3RTQ6EQFz3kc+WXVk6BVidR+O
AXhGrFQHG5r+1BPayQPGllhmjahXYfkpetxSwtxBz9YBodVCNoZ5sQf6lI3E7gZY
v7hTGdBfJtOGN7jwFQAYLibBozQVR2DkcQ5vSGnfNd0vhcXuXIHb2A30YWRMm24g
+ZcM/MZ9YfryDSqfXhHrabwr0XkhKpUyVftuyosRCYJxe+Q/T2pOJ+N/1I4TVdTT
Qcm6v6b6L6GP8Q==
-----END CERTIFICATE-----